Read supports single sign-on (SSO) through SAML. This is different from the standard Google and Microsoft sign-in options available to all users. To set up SAML for your organization, you need a Read Workspace on the Enterprise+ plan.
The articles below explain how to get your ACS URL and Entity ID from Read and set up your SAML application. Once set up, your users can sign in with SAML either as an extra option or as the only way to sign in.
Choose your identity provider
- Setting up SAML Authentication with Google Workspace
- Setting up SAML Authentication with Microsoft Entra
- Setting up SAML Authentication with Okta
- Setting up SAML Authentication with Duo
If you use a different identity provider and would like Read to support it, please contact Read Support.
Next steps
Once SAML is working, you may also want to:
- Require SAML sign-in: Make everyone on your verified domains sign in through SAML. See Enforcing SAML for users in your domain.
- Set up SCIM provisioning: Add, update, and remove Workspace members automatically from your identity provider. See Managing users and teams with SCIM provisioning.
- Turn on domain capture: Keep people on your domain from creating Read accounts outside your Workspace. See Configuring domain capture for your Workspace.